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FIG. 3 



CLIENT COMPUTER 



> REMOTE COMPUTER 



FIG. 4 
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INPUT SPACE: 
STATE SPACE; 
OUTPUT SPACE: 



Q' =iO,1,2 1 q Q j I q Q =3 
A' =jO,U3| 



VECTORIZATION EXAMPLE FOR N=2: 

0 1 2 B 

INPUT SPACE: T =((0,0), (0,1), (1,0), (1,1)1 

0 1 2 % =3 

STATE SPACE: Q' =i(0,0), (0,1), (1,0), (1,1)1 

0 12 3 

OUTPUT SPACE: A' =i(0,0) 1 (0,1), (1,0), (1,1)1 

FIG. 7 A 



VECTORIZATION EXAMPLE FOR N=3: 

0 1 2 B 

INPUT SPACE: [' =|(0,0), (0,1), (0,2), (1,0)1 

o i 2 q 0 = 3 

STATE SPACE: Q'=j(0,0), (0,1), (0,2), (1,0)1 

0 1 2 B 

OUTPUT SPACE: A' =1(0,0), (0,1), (0,2), (1,0)1 

FIG. 7B 



VECTORIZATION EXAMPLE FOR N>4 

0 1 2 B 

INPUT SPACE: V =j(0), (l), (2), (3)1 

0 1 2 %=1 

STATE SPACE: Q" =|(0), (1), (2), (3)1 

0 1 2 

OUTPUT SPACE: A' =j(0). (1), (2), (3)1 



FIG. 7G 



VECTORIZATION EXAMPLE FOR N'=2: 
INPUT SPACE: V =1(0,0), (0,1), (1,0), (1,1)j 
STATE SPACE: Q' =1(0,0), (0,1), (1,0), 
OUTPUT: A' =1(0,0), (0,1), (1,0), (1,1)! 
IN THIS CASE N MAY BE SET TO ANY PRIME NUMBER > 2. 
SELECTING PRIMES N>2 RESULTS IN (N-2) 2 INPUT, STATE AND 
OUTPUT REPRESENTATIONS THAT INITIALLY REMAIN UNUSED. 
FIG. 8 A 

VECTORIZATION EXAMPLE FOR N'=3: 

INPUT SPACE: T =1(0,0), (0,1), (0,2), (l,0)j 

STATE SPACE: Q' =j(0,0), (0,1), (0,2), (1,0)1 
OUTPUT: A' ={(0,0), (0,1), (0,2), (1,0)1 
IN THIS CASE N MAY BE SET TO ANY PRIME NUMBER > 3. 
FOR EVERY N THERE ARE N 2 -4 UNUSED REPRESENTATIONS FOR INPUT VECTORS 
(INPUT "SYMBOLS"), STATE VECTORS, AND OUTPUT VECTORS (OUTPUT "SYMBOLS"). 

FIG. SB 

VECTORIZATION EXAMPLE FOR N'>4: 

INPUT SPACE: V =j(0), (1), (2), (3)1 

STATE SPACE: Q' =|(0), (1), (2), (3)1 
OUTPUT: A' =1(0), (1), (2), (3)1 
IN THIS CASE N MAY BE SET TO ANY PRIME NUMBER > 5 
FOR EVERY N THERE ARE N-4 UNUSED REPRESENTATIONS FOR 
INPUT VECTORS, STATE VECTORS, AND OUTPUT VECTORS. 
SELECTING AN N SUCH THAT THERE ARE MORE VALUES FOR N THAN OUTPUT VECTORS, 
INPUT VECTORS OR STATES IS SOMETHING THAT CAN BE DONE TO INCREASE THE 
POSSIBILITIES FOR INTRODUCING RANDOMNESS INTO THE PLAINTEXT STATES MACHINE 

FIG. SC 
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PRECALCULATE a ; (x) FOR k=|0,1 I 2,4 I 5.|<Z 11 . 
PRECOMPUTATION RESULTS IN THE SERIES OF POLYNOMIALS 

o 2 (x) 
o 5 (x) 

REPRESENTED BY THEIR RESPECTIVE ARRAYS OF COEFFECIENTS 



FIG. / 7 



NODE NUMBER - 



IW 







I 
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x,-x 2 


2 

X 3' X 3*" X ^ 












BRANCH NODE- — ^3 


x,>0? 







\YES 



0(T)=-1 5 



t 



OUTPUT NODE 



x i>0? 



YES/ Inq_ 



' NODE: I ( x HO, x, 0) 

— COMPUTATION NODE: 

g 2 (T)=(x 2 -x2 x ? x 3 +1) 



-COMPUTATION NODE: 
g^TH-x,, x 2 , x 3 ) 

- BRANCH NODE 



yo(T)=x 3 -i 



• WHEN RESTRICTING A BSS MACHINE TO A FINITE FIELD 4 THE CHOICE 
OF N IS DICTATED BY THE FOLLOWING: 

1) N MUST BE A PRIME NUMBER 

2) N MUST BE AT LEAST AS GREAT AS THE NUMBER OF NODES 

3) N MUST MAKE ALLOWANCE FOR CONSTANTS USED IN THE MACHINE 

4) N MUST ACCOMODATE USER REQUIREMENTS 

• FOR THE ABOVE EXAMPLE: 

N SATISFIES THE FIRST CONDITION IF IT IS EQUAL TO 2, 3, 5, 7, 11,... 

N SATISFIES THE SECOND CONDITION IF IT IS > 7 

N THE GREATEST CONSTANTS HAVE ABSOLUTE VALUE 1, SO N SATISFIES THE 
THIRD CONDITION IF IT IS > 2 

IF THE USER REQUIRES THAT THE x INPUT MUST BE ABLE TO BE AS LARGE 
AS 100, N SATISFIES THE FOURTH CONDITION IF IT IS > 100. THE LEAST 
N SATISFYING ALL FOUR CONDITIONS WOULD THEN BE N=101 

• SINCE ALL MAPPINGS IN THE BSS MACHINE ABOVE ARE POLYNOMIAL, THE RESTRICTION 
OF COMPUTATION MAPPINGS TO POLYNOMIAL MAPPINGS IS ALREADY SATISFIED. 

• THE NEW NODE-NUMBERING CONVENTION SIMPLY SUBTRACTS 1 FROM EACH NODE 
NUMBER, SUCH THAT NUMBERING BEGINS AT 0. 1 2 3 4 5 6 7 

lllllll 
0 12 3 4 5 6 



FIG. 18 



THE FULL STATE SPACE OF THE BSS MACHINE, AS ADAPTED SO FAR, IS: 

j0,...,6j x Z N x Z N x Z N CORRESPONDING VECTORS HAVE THE COMPONENTS: 

NODE NUMBER - ^ ""STATE SPACE 1 n l x i 1 x 2 1 x 3 1 

SPACE 

THE REVISED FULL STATE SPACE ADDS THE OUTPUT AND INPUT COMPONENTS: 
|0,...,6j x Z N x Z N x Z N x Z N x Z N CORRESPONDING VECTORS HAVE THE COMPONENTS: 
OU™ "iNPUT 1 n [ x i |X2|x 3 |x 4 |x71 

/ ^ INPUT 
OUTPUT 

ALSO A COMPUTATION MAPPING g ; IS ADDED TO EVERY NODE RHAT DOESN'T 
ALREADY HAVE ONE. THUS FOR EACH NODE VIEWED IN ISOLATION: 



NODE 0: 
NODE 
NODE 2: 
NODE 3: 
NODE 4: 
NODE 5: 
NODE 



g 0 (T)=(0, x 5 , 0, 0, x 5 ) IS ADDED 

V (NOW g,) IS CHANGED TO g, (T)=(x 2 - x?, x 2 , x 3 +1, 0, x 5 ) 

Q2(~x>(xi. x 2- x 3- °- x 5) ] S ADDED 

^(^)=( x i. x 2 . § ] ■ x 5 ) IS ADDED 

g 4 (PREVIOUSLY "g 5 ") IS CHANGED TO g 4 (T)=(-x 1 , x 2 , x 3 , 0, x 5 ) 

%{~*~H*], x 2 . x 3 . 0, x 5 ) IS ADDED 

96 (T)=(x 1 , x 2 , x 3 , x 3 -1, x 5 ) IS ADDED 



AS THE RELATION >0 HOLDS FOR ALL ELEMENTS IN ? N , IT IS REPLACED 
BY A SERIES OF SET INCLUSION RELATIONS. BECAUSE Z N DOES NOT HAVE 
NEGATIVE NUMBERS AS ELEMENTS, THE RELATIONS WILL NOT HAVE AN EXACT 
CORRESPONDENCE TO THE ORIGINAL RELATIONS. REASONABLE SET INCLUSION 
RELATIONS FOR THIS EXAMPLE ARE: 

FOR NODE 2: eZp-jOi WITH THE SAME MAPPING IN NODE 1 AS BEFORE. 
FOR NODE 5: £ jl j, CHANGING g 4 TO g 4 (T)=(x 3 + 1, x 2 , x 3 , 0, x 5 ) 



FIG. 19 



.OUTPUT 



NODE NUMBER-— 0 



g Q ( TH[U5j , 0 , 

STATE ^ 



x r x 2 - 4x3^X3+1 



NO/ \YES 



x^N-1 ~ 4 x 1 ^ — x + 1 



9 3 ("x")=(xi, x 2 , x 3 , N-1, x 5 ) 



xi€|1|? 



YES/ NO 



X4-X3-I 



g^T)^- x| x 2> xyH, 0, x ) 
g 2 (T)=(x lf x ? x 3 , 0, x 5 ) 

-9 4 (~x )=( X3+I , x 2 , x 3 , 0, x 5 ) 
*9 5 ("x )=( x lf x 2> x 3 , 0, x 5 ) 



£) %(T)=(x ll x 2 ,x 3 ,x 3 -1 1 x 5 ) 
FIG. £ OA 
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Xf-x^-x 2 ,x 2 — -x 2 +1 










x^ Zn-JOJ, x^x 2 +1 





NO/ \YES 



g 2 ( 



X =Xl, X 0l Xr 



1- *2- T 



YES/ 



g 3 (T)=(x ]l x 2 , 0, x 4 ) 



x 3— N ~ 1 r — * %( 7 H*]> x 2' N_1 ' ^ 



fig. zon 



ELEMENTS IN K ELEMENTS IN K 

((x-if _1 ' mod N)=0 IF x=i AND 0 OTHERWISE. 

TO CONSTRUCT A FUNCTION RETURNING 1 IF x e K AND 0 OTHERWISE, 

SYMBOLICALLY MULTIPLY (x-i)' N_1 VoR EVERY ij?K MODULO N. 

NODE WITH NO BRANCHES: 




FIG. 2 / 



FUNCTION COMPONENTS VARIABLES 




SELECTED FOR ENCRYPTION e+1 SELECTED FOR DECRYPTION BY THE USER 
THESE COMPONENTS ARE HELD IN THE SET I 



KEY GENERATION BEGINS WITH TWO ARRAYS: 
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sR 



FIG. J2£A 
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FIG. £^jB 
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FUNCTION COMPONENTS VARIABLES 
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e+d 



SELECTED FOR 
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SELECTED FOR 
DECRYPTION 
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SELECTED VARIABLES i ARE DECRYPTED BY: 
APPLYING THE CORRESPONDING INVERSE 
PERMUTATIONS s' e+ j 

APPLYING THE CORRESPONDING PERMUTATION 
r e+i TO REMOVE THE EFFECT OF... 

THE ORIGINAL INVERSE PERMUTATION s e+ ; 

SELECTED COMPONENTS j ARE ENCRYPTED BY: 
TAKING THE ORIGINAL PERMUTATIONS rj 

APPLYING THE CORRESPONDING INVERSE 
PERMUTATION sj, TO CANCEL THE ENCRYP- 
TION EFFECT OF ry, AND 

APPLYING THE CORRESPONDING NEW 
PERMUTATION r; 
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SELECTED GROUPS OF VARIABLES, i, 
ARE ENCRYPTED BY: 
TAKING THE ORIGINAL PERMUTATIONS rj 

APPLYING THE CORRESPONDING INVERSE 
PERMUTATIONS sj, TO CANCEL THE ENCRYP- 

EFFECT OF rj; AND 
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ACCORDANCE WITH A SECOND REGISTER OF M IT READS 




FIG. 6S ( FINISHED ) 



ACQUIRE SPECIFICATION OF INDEX SELECTIONS e(U) 

e(k,l) e(k, d k ) USED IN COMPOSITION 



SET i=0 AND ( 


a 1 ..-.a m ) = (0..-.0) 










SETj 


=k 






COMPUTE AND STORE TEMPORARILY h j ( a eQ 1) -— a e(j d- )^ 



I 



M~i 

YESJ 

SET t ffh ( 0l --.o ) = f( hl ...- hm ) 

INCREMENT (a, ,~.aj AS BASE-N NUMBER WITH m DIGITS 



i = i+1 




( FINISHED ) 
FIG. 69 



ACQUIRE SPECIFICATION OF INDEX SELECTIONS e'(U) 
e'Q,^) e'(k,1) e'(k,c k ) 

I 

ACQUIRE SPECIFICATION OF INDEX SELECTIONS e(U) 
efLdj) e(k,1) e(k,d k ) 

I 

SET i=0 AND (a 1 .-.a m ) = (0 — 0) 



SET j=k 



COMPUTE AND STORE TEMPORARILY 
! i ( H-1)'-' fe Ucj)' x e(j,1).-. xeG.dj)) 



i = H 




SErt fh(Qi--o m ) = (h 1 h k ) 

i zz: 

i=i+1 AND INCREMENT Uj .->a m ) AS BASE-N NUMBER WITH m DIGITS 

I ~ 

i = i+1 



YESj 

FIG. 70 ( FINISHED ) 



GROUP MAPPING COMPONENTS TOGETHER INTO I SUCCESSIVE 
GROUPS, EACH GROUP i CONSISTING OF c; CONSECUTIVE COMPONENTS 






GROUP VARIABLE INTO A:- £ SUCCESSIVE GROUPS, 
EACH GROUP i CONSISTING OF cj CONSECUTIVE VARIABLES 






SELECTING A GROUP OF VARIABLES, g ; , l<^<_ k AS "PARAMETER" 
OR EXPLICITY SELECTING NO SUCH PARAMETER FOR ALL k 
SUCCESSIVE GROUPS OF COMPONENTS AND VARIABLES 






SELECT GROUPS OF COMPONENTS TO BE ENCRYPTED MAPPING 






SELECT GROUPS OF VARIABLES TO BE DECRYPTED 






SELECT EQUALITY RESTRICTIONS ON COMPONENTS 
IN KEY QUADRUPLES 







( FINISHED ) 



FIG. 7 1 



DETERMINE APPROPRIATE REPRESENTATION FOR KEYS 



ACQUIRE SPECIFIED PATTERN OF PARAMETIZED ENCRYPTION 



DETERMINE WHICH KEY QUADRUPLES NEED TO BE GENERATED 



DETERMINE POLYNOMIAL TO TRANSLATE FROM BASE-N 
VECTORS TO BASE-N 0 ' NUMBERS 



DEFINE N c i x(q 11 
ARRAYS R AND S 




DEFINE N Ci+C 9i X(Cj+1) 
ARRAYS R AND S 



PERMUTING 7 N Cj ; 



SIMULTANEOULSY 
TRANSLATING PERMUTATION DATA TO BASE-N 
VECTORS AND STORING IN ARRAYS R AND S 



PERMUTING Z N c ? , SIMULTANEOULSY TRANSLATING 
PERMUTATION DATA TO BASE-N VECTORS AND 
STORING IN THE RELEVANT PARTS OF ARRAYS 
R AND S INDEXED BY A BASE-N Cg ' NUMBER 




FROM FIG. 72B T0 F!G - m 

FIG. 7£A 



TO FIG. 72A 



FROM FIG. 72A 



/IS THE \^ 
MAPPING TO BE \^JES 



^ENCRYPTED A POLYNOMIAL^ 
MAPPING? 




NO 




COMPUTE THE "PERMUTATION" AND ITS 
"INVERSE" BY INTERPOLATION, USING 

PRECOMPUTED a; (X) AND ARITHMETIC 
TABLES IF SUCH IS COST EFFECTIVE 












STORE RESULT AS KEY DATA 



ENOUGH KEY 
QUADRUPLES BEEN 
^GENERATED?/- 

YES| 



USE EQAULITY RESTRICTIONS TO DETERMINE VALUES OF REMAINING 
REMAINING NON-IDENTITY KEY QUADRUPLES 






SET REMAINING UNDEFINED KEY QUADRUPLES TO IDENTITY 







( FINISHED ) 



DETERMINE APPROPRIATE MAPPING REPRESENTATION 
FOR THE ENCRYPTION 






ACQUIRE A SPECIFIED PATTERN OF PARAMETIZED ENCRYPTION 






ACQUIRE AN APPROPRIATE SET OF QUADRUPLES OF ENCRYPTION KEYS 






SYMBOLICALLY SUBSTITUTE EACH GROUP OF VARIBLES TO BE 
DECRYPTED IN A PARAMETIZED MANNER, WITH SjOijlj.^-j) 






SYMBOLICALLY SUBSTITUTE EACH GROUP OF VARIBLES wj^, TO BE 
DECRYPTED IN A NON-PARAMETIZED MANNER, WITH s^w"^ ) 






COMPOSE EACH GROUP OF MAPPING COMPONENTS Vj TO BE ENCRYPTED 
IN A PARAMETIZED MANNER, WITH r; , GIVING r j ( v i ( - )■ \-l ) 







± 



COMPOSE EACH GROUP OF MAPPING COMPONENTS v; TO BE ENCRYPTED 
IN A NON-PARAMETIZED MANNER, WITH r ; , GIVING r ; ( Vj ( ... )) 



( FINISHED ) 
FIG. 73 



f SPECIFY PATTERN FOR PARAMETRIZED ENCRYPTION OF REGISTER *\ 
V MACHINES MAPPING FOR COMPUTING A COMPUTATION STEP J 



SET AL 


. Cj=d 






MARK NEXT INSTRUCTION POINTER AND NEXT STORAGE 
MAPPINGS AS PLAIN TEXT MAPPINGS 






MARK SOME REGISTERS AS UNENCRYPTED 






MARK KEY QUADRUPLES FOR PLAIN TEXT REGISTER & 
POINTER MAPPINGS AS IDENTITY MAPPINGS 






MARK ANY ENCRYPTION OF PARTS OF THE REGISTER TRANSITION 
MAPPING, AND ANY REGISTERS AS NON-PARAMETIZED 






MARK THE STORAGE CELL MAPPING q FOR 
PARAMETRIZED ENCRYPTION 






MARK ONE OR MORE ' 
SPACE AS PLA 


CELLS" IN THE STORAGE 
N TEXT "CELLS" 



( FINISHED ) 



FIG. 74 



DETERMINE APPROPRIATE 
REPRESENTATION FOR THE KEYS 



ACQUIRE SPECIFIED SPECIALIZED PATTERN OF 
PARAMETIZED REGISTER MACHINE ENCRYPTION 



I 



DEFINE TWO N d+d X(d+1) ARRAYS RANDS 



I 



DEFINE POLYNOMIAL TO TRANSLATE FROM 
BASE-N VECTORS TO BASE-N d NUMBERS 




PERMUTING fy, SIMULTANEOULSY TRANSLATING 
PERMUTATION DATA TO BASE-N VECTORS AND STORING 
IN RELEVANT PARTS OF ARRAYS R AND S INDEXED BY 

BASE N d NUMBER REPRESENTING A CELL INDEX 



FILL RELEVANT PART OF R AND S WITH DATA 
FOR IDENTITY MAPPING 




YES 



TO FIG. 75B 



FIG. 7 5 A 



FROM FIG. 75A 




1. 



COMPUTE THE "PERMUTATION" AND ITS "INVERSE" 
BY INTERPOLATION, USING PRECOMPUTED Oj( X ) 
AND ARITHMETIC TABLES IF SUCH IS COST EFFECTIVE 



STORE RESULT AS KEY DATA 




USE EQUALITY RESTRICTIONS TO 
DETERMINE VALUES OF REMAINING 
NON-IDENTITY KEY QUADRUPLES 



DEFINE N° X(d+1) ARRAYS R I 



SET REMAINING KEY QUADRUPLES 
TO IDENTITY 



PERMUTING # N d, S1MULTANEOULSY 
TRANSLATING PERMUTATION DATA TO BASE-N 
VECTORS AND STORING IN ARRAYS R AND S 



( FINISHED ) 



COMPUTE THE PERMUTATION AND ITS INVERSE 
INTERPOLATION, USING PRECOMPUTED c;(X) AND 
ARITHMETIC TABLES IF SUCH IS COST EFFECTIVE 




STORE RESULT AS KEY DATA 

fig. rsn 1 



DETERMINE THE APPROPRIATE REPRESENTATION 
FOR THE ENCRYPTION 



ACQUIRE A SPECIFIED PATTERN OF PARAMETIZED ENCRYPTION 



ACQUIRE AN APPROPRIATE SET OF QUADRUPLES OF SPECIALLY 
ADAPTED ENCRYPTION KEYS 






DO PARAMETIZED ENCRYPTION OF REGISTER MACHINE 
MAPPING 







FINISHED ^) 



fig. ye 



